Likelihood is the overall rating of the probability that a specific vulnerability will be exploited or attacked.

Risk __________ is an approach to combining risk identification, risk analysis, and risk evaluation into a single strategy.

__________ is the risk assessment deliverable that places each information asset into a ranked list according to its value based on criteria developed by the organization.

The degree to which a current control can reduce risk is also subject to calculation error. __________

What is the assessment of the amount of risk an organization is willing to accept for a particular information asset?

An evaluation of the threats to information assets, including a determination of their likelihood of occurrence and potential impact of an attack, is known as threat __________.

For an organization to manage its InfoSec risk properly, managers should understand how information is __________.

The assessment of the amount of risk an organization is willing to accept for a particular information asset is known as risk __________.

The document designed to regulate organizational efforts related to the identification, assessment, and treatment of risk to information assets is known as the RM __________. 

Some threats can manifest in multiple ways, yielding multiple exploits for an asset-threat pair. __________ ​